minhnhat/cms.uldp.edu.vn
1
0
Fork 0
forked from UKSOURCE/cms.hailearning.edu.vn
Code Pull Requests Activity

fix cors

Browse Source
This commit is contained in:
Admin
2026-04-11 16:11:26 +07:00
parent 6002e04c2e
commit 033cec29f1
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
server.js
View File

@@ -131,10 +131,19 @@ app.use((req, res, next) => {
app.use((req, res, next) => { app.use((req, res, next) => {
// Allow requests from configured FRONTEND_URL or allow all if not set // Allow requests from configured FRONTEND_URL or allow all if not set
const origin = req.headers.origin; const origin = req.headers.origin;
const allowedOrigin = FRONTEND_URL || "*";
if (allowedOrigin === "*" || origin === allowedOrigin) { // Support multiple frontend URLs (dev and production)
res.setHeader("Access-Control-Allow-Origin", allowedOrigin === "*" ? "*" : origin); const allowedOrigins = [
FRONTEND_URL,
"http://dev.hailearning.edu.vn",
"https://www.hailearning.edu.vn",
"http://www.hailearning.edu.vn"
].filter(Boolean); // Remove undefined/empty values
const isOriginAllowed = allowedOrigins.includes(origin) || !FRONTEND_URL;
if (isOriginAllowed) {
res.setHeader("Access-Control-Allow-Origin", origin || "*");
res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS"); res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS");
res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization"); res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
res.setHeader("Access-Control-Allow-Credentials", "true"); res.setHeader("Access-Control-Allow-Credentials", "true");